ENUM NFT_EXTHDR_ATTRIBUTES(9)
π¦ enum nft_exthdr_attributes(9) β the Kernel API Manual β¨
okay so bestie, we're in the <pink>Kernel API Manual</pink> today and the star of the show is enum nft_exthdr_attributes β it's an <purple>enum</purple>, it lives in the kernel, and it's literally the whole vibe-check list of netlink attributes for the <mint>nf_tables</mint> extension header expression. yes. that. π
π NAME π
enum nft_exthdr_attributes β nf_tables extension header expression netlink attributes π«Ά
πΈ SYNOPSIS πΈ
enum nft_exthdr_attributes {
NFTA_EXTHDR_UNSPEC ,
NFTA_EXTHDR_DREG ,
NFTA_EXTHDR_TYPE ,
NFTA_EXTHDR_OFFSET ,
NFTA_EXTHDR_LEN ,
NFTA_EXTHDR_FLAGS ,
NFTA_EXTHDR_OP ,
NFTA_EXTHDR_SREG ,
__NFTA_EXTHDR_MAX
};
like, that's the whole squad right there π nine members, no notes.
β Constants β
okay so let's meet the cast, one by one, no skipping, no cap π
NFTA_EXTHDR_UNSPECβ<lavender>-- undescribed --</lavender>π yeah that's literally all the docs say. it's the mystery member and honestly? iconic for that.NFTA_EXTHDR_DREGβ the<hotpink>destination register</hotpink>(and the type isNLA_U32: nft_registers). this is where the answer lands, bestie.NFTA_EXTHDR_TYPEβ the<cyan>extension header type</cyan>(type:NLA_U8). tiny lil 8-bit guy.NFTA_EXTHDR_OFFSETβ the<peach>extension header offset</peach>(type:NLA_U32).NFTA_EXTHDR_LENβ the<yellow>extension header length</yellow>(type:NLA_U32).NFTA_EXTHDR_FLAGSβ the<green>extension header flags</green>(type:NLA_U32).NFTA_EXTHDR_OPβ the<blue>option match type</blue>(type:NLA_U32).NFTA_EXTHDR_SREGβ the<purple>source register</purple>(typeNLA_U32: nft_registers). this is where we're reading from, so slay.__NFTA_EXTHDR_MAXβ<lavender>-- undescribed --</lavender>π again, the docs said nothing. she's mysterious. we respect her.
π SEE ALSO π
fr fr go read the source, it's all right here:
- Kernel file
./include/uapi/linux/netfilter/nf_tables.henum nft_registers(9),enum nft_verdicts(9),enum nf_tables_msg_types(9)enum nft_list_attributes(9),enum nft_hook_attributes(9),enum nft_table_flags(9)enum nft_table_attributes(9),enum nft_chain_attributes(9),enum nft_rule_attributes(9)enum nft_rule_compat_flags(9),enum nft_rule_compat_attributes(9),enum nft_set_flags(9)enum nft_set_policies(9),enum nft_set_desc_attributes(9),enum nft_set_field_attributes(9)enum nft_set_attributes(9),enum nft_set_elem_flags(9),enum nft_set_elem_attributes(9)enum nft_set_elem_list_attributes(9),enum nft_data_types(9),enum nft_data_attributes(9)enum nft_verdict_attributes(9),enum nft_expr_attributes(9),enum nft_immediate_attributes(9)enum nft_bitwise_ops(9),enum nft_bitwise_attributes(9),enum nft_byteorder_ops(9)enum nft_byteorder_attributes(9),enum nft_cmp_ops(9),enum nft_cmp_attributes(9)enum nft_range_ops(9),enum nft_range_attributes(9),enum nft_lookup_attributes(9)enum nft_dynset_attributes(9),enum nft_payload_bases(9),enum nft_payload_csum_types(9)enum nft_payload_attributes(9),enum nft_exthdr_op(9),enum nft_meta_keys(9)enum nft_rt_keys(9),enum nft_hash_types(9),enum nft_hash_attributes(9)enum nft_meta_attributes(9),enum nft_rt_attributes(9),enum nft_socket_attributes(9)enum nft_ct_keys(9),enum nft_ct_attributes(9),enum nft_offload_attributes(9)enum nft_limit_attributes(9),enum nft_connlimit_attributes(9),enum nft_counter_attributes(9)enum nft_last_attributes(9),enum nft_log_attributes(9),enum nft_log_level(9)enum nft_queue_attributes(9),enum nft_quota_attributes(9),enum nft_secmark_attributes(9)enum nft_reject_types(9),enum nft_reject_inet_code(9),enum nft_reject_attributes(9)enum nft_nat_types(9),enum nft_nat_attributes(9),enum nft_tproxy_attributes(9)enum nft_masq_attributes(9),enum nft_redir_attributes(9),enum nft_dup_attributes(9)enum nft_fwd_attributes(9),enum nft_objref_attributes(9),enum nft_gen_attributes(9)enum nft_object_attributes(9),enum nft_flowtable_flags(9),enum nft_flowtable_attributes(9)enum nft_flowtable_hook_attributes(9),enum nft_osf_attributes(9),enum nft_synproxy_attributes(9)enum nft_devices_attributes(9),enum nft_trace_attributes(9),enum nft_ng_attributes(9)
like, that's the entire friend group and they're all invited to the function π§
ok that's the whole page, bestie.<rainbow>go readnf_tables.hand have the best day ever</rainbow>π
mwah π this little number came out of ./include/uapi/linux/netfilter and it's dated <hotpink>October 2026</hotpink> β screenshot it, memorise it, tell your friends. bye bestie!! πβ¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms